Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/qPgFOiKxJLDpdTilhYgZPrKGHjw.roa
File: qPgFOiKxJLDpdTilhYgZPrKGHjw.roa (raw, json)
Hash identifier: m7UK15QpMiMYw7CRC6ZOxg/sICx/UBTV4BV3vXeXMv4=
Subject key identifier: A8:F8:05:3A:22:B1:24:B0:E9:75:38:A5:85:88:19:3E:B2:86:1E:3C
Certificate issuer: /CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Certificate serial: 019B7911133946D0EC857E5087C0B99B641B
Authority key identifier: 24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/qPgFOiKxJLDpdTilhYgZPrKGHjw.roa
Signing time: Thu 01 Jan 2026 10:18:40 +0000
ROA not before: Thu 01 Jan 2026 10:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39930
IP address blocks: 195.95.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:13:39:46:d0:ec:85:7e:50:87:c0:b9:9b:64:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Validity
Not Before: Jan 1 10:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8f8053a22b124b0e97538a58588193eb2861e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d1:a6:2c:74:2d:a6:d9:5b:66:e1:5b:81:7c:
6a:6f:44:c8:ea:fe:7a:bc:09:bd:40:9e:31:ae:e8:
69:2e:4f:a3:22:0f:e6:70:41:71:18:f9:0d:c2:63:
30:c9:12:3f:72:f9:f2:0e:08:7d:b0:5d:6c:65:6c:
ad:fd:f3:36:24:e0:53:04:66:7c:2b:f6:be:90:8e:
7f:c3:b6:29:32:7a:93:86:6c:ef:82:cb:14:06:0f:
3a:c1:d0:e4:f9:4d:bc:71:24:f5:dd:e5:08:c5:30:
41:df:91:44:d3:24:da:5f:94:0f:69:41:37:ff:e8:
5c:35:ac:d7:a3:90:27:63:0a:13:d8:63:b6:a0:de:
b6:98:57:71:39:17:a7:05:c4:2a:f6:47:93:68:05:
5d:e8:dd:a3:ae:46:c8:d7:4c:ca:15:b1:08:81:b4:
f8:a4:3a:c2:39:f5:c9:33:38:93:0d:cd:d7:ec:34:
22:8b:47:65:aa:a0:b2:0f:6f:f8:f8:5c:aa:d4:08:
c2:fb:9a:09:2e:41:d5:f0:e6:88:b1:40:51:89:aa:
0a:7c:2a:91:5f:b4:4b:11:13:e0:08:b1:0c:c8:c4:
83:83:ff:ab:40:a9:8c:e6:89:dc:51:9f:96:bc:12:
59:a7:72:a1:0a:36:ad:0b:a8:e5:5e:60:a3:5e:df:
97:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F8:05:3A:22:B1:24:B0:E9:75:38:A5:85:88:19:3E:B2:86:1E:3C
X509v3 Authority Key Identifier:
keyid:24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/qPgFOiKxJLDpdTilhYgZPrKGHjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.145.0/24
Signature Algorithm: sha256WithRSAEncryption
46:2d:a0:1d:d2:ee:55:47:04:1b:67:e5:d1:47:66:8d:ed:6c:
59:ba:1c:3b:69:3b:e3:96:81:4a:3a:c5:8f:e3:64:86:ba:ea:
48:c9:95:c5:2f:2b:46:66:a1:0f:eb:e7:f3:e7:b8:4a:5a:0e:
8e:00:a2:30:01:7a:01:88:f2:1c:e0:9c:ce:09:80:8b:39:93:
0d:17:26:6d:91:92:25:57:42:d5:36:3d:38:67:d4:d5:d2:29:
bd:10:1c:52:71:09:64:72:da:b0:78:52:e9:ed:0b:62:5b:33:
e8:79:4b:ae:3c:32:7d:98:3a:39:b2:fc:7c:78:9b:86:f4:10:
39:60:e4:8a:35:4e:d7:73:db:6f:89:4f:e6:78:81:dc:b4:95:
d6:2d:29:74:91:03:6d:07:df:77:06:b8:bb:c2:3f:85:55:00:
3d:03:c5:4a:60:03:c6:71:c7:90:17:21:8b:a3:51:0b:2d:9c:
60:4c:d2:f1:3b:aa:9b:fd:aa:80:bd:c4:9b:89:34:d7:8f:59:
0c:50:ff:e4:73:b4:ff:f0:6f:ee:c3:ed:b7:96:3f:b1:ba:2d:
f1:52:ec:d8:a0:a4:fb:01:a1:9c:c2:6e:e2:05:36:33:71:45:
12:ca:72:f7:34:b7:c6:0f:0c:8b:6e:bf:44:6d:d6:3b:c7:fe:
14:eb:34:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5ERM5RtDshX5Qh8C5m2QbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTJkZTkzNzBjMjBlZjFiYTRkN2ZlMWJiMDE4ZjNmNmRm
ZGM5Y2UwHhcNMjYwMTAxMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGY4MDUzYTIyYjEyNGIwZTk3NTM4YTU4NTg4MTkzZWIyODYxZTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtGmLHQtptlbZuFbgXxqb0TI6v56
vAm9QJ4xruhpLk+jIg/mcEFxGPkNwmMwyRI/cvnyDgh9sF1sZWyt/fM2JOBTBGZ8
K/a+kI5/w7YpMnqThmzvgssUBg86wdDk+U28cST13eUIxTBB35FE0yTaX5QPaUE3
/+hcNazXo5AnYwoT2GO2oN62mFdxORenBcQq9keTaAVd6N2jrkbI10zKFbEIgbT4
pDrCOfXJMziTDc3X7DQii0dlqqCyD2/4+Fyq1AjC+5oJLkHV8OaIsUBRiaoKfCqR
X7RLERPgCLEMyMSDg/+rQKmM5oncUZ+WvBJZp3KhCjatC6jlXmCjXt+X/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKj4BToisSSw6XU4pYWIGT6yhh48MB8GA1UdIwQY
MBaAFCRS3pNwwg7xuk1/4bsBjz9t/cnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZMZWszRENEdkc2VFhfaHV3R1BQMjM5eWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi81MTA2NWItOTA0Zi00Y2UzLThmZTUt
OGVhMmQxNGE2NDJlLzEvcVBnRk9pS3hKTERwZFRpbGhZZ1pQcktHSGp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi81MTA2NWItOTA0Zi00Y2UzLThmZTUtOGVhMmQxNGE2NDJl
LzEvSkZMZWszRENEdkc2VFhfaHV3R1BQMjM5eWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1+RMA0G
CSqGSIb3DQEBCwUAA4IBAQBGLaAd0u5VRwQbZ+XRR2aN7WxZuhw7aTvjloFKOsWP
42SGuupIyZXFLytGZqEP6+fz57hKWg6OAKIwAXoBiPIc4JzOCYCLOZMNFyZtkZIl
V0LVNj04Z9TV0im9EBxScQlkctqweFLp7QtiWzPoeUuuPDJ9mDo5svx8eJuG9BA5
YOSKNU7Xc9tviU/meIHctJXWLSl0kQNtB993Bri7wj+FVQA9A8VKYAPGcceQFyGL
o1ELLZxgTNLxO6qb/aqAvcSbiTTXj1kMUP/kc7T/8G/uw+23lj+xui3xUuzYoKT7
AaGcwm7iBTYzcUUSynL3NLfGDwyLbr9EbdY7x/4U6zRN
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:48:02 2026 by rpki-client